This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft File: unZwbT4IgT24sndmKK-EZRjibdI.mft (raw, json) Hash identifier: VAMNVAyKk1BhS/iB7tFUqTuBn8jTW04zH5PfqcyZpz4= Subject key identifier: 0E:FA:FF:16:1C:C1:79:30:28:A6:89:1F:57:6B:A5:D6:1E:ED:AE:F4 Authority key identifier: BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2 Certificate issuer: /CN=ba76706d3e08813db8b2776628af846518e26dd2 Certificate serial: 019B78CA8CC3EAFBC607D47296480CBB5095 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft Manifest number: 17A9 Signing time: Thu 01 Jan 2026 09:01:38 +0000 Manifest this update: Thu 01 Jan 2026 09:01:38 +0000 Manifest next update: Fri 02 Jan 2026 09:01:38 +0000 Files and hashes: 1: 1-5QJBLxp5AmzSVUk8qikofQqav4.roa (hash: bXIAnhQl9MhR5WL6f2K74RtvR0mnQzIz2IKnZ9vIJ10=) 2: unZwbT4IgT24sndmKK-EZRjibdI.crl (hash: XhL3ixOtr/UCEJ/2sOawsPhUdF4TCdhOj8TKgfWm4Bk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:ca:8c:c3:ea:fb:c6:07:d4:72:96:48:0c:bb:50:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba76706d3e08813db8b2776628af846518e26dd2 Validity Not Before: Jan 1 09:01:38 2026 GMT Not After : Jan 2 09:01:38 2026 GMT Subject: CN=0efaff161cc1793028a6891f576ba5d61eedaef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:f0:aa:3f:3f:99:d2:fc:fe:3d:2c:dd:c8: 9b:17:c1:7a:e9:78:a9:b8:df:fb:e9:bb:0a:04:2a: a9:fa:ed:d6:fe:f4:ab:2d:b4:1d:04:48:8b:f2:74: a6:bc:23:0e:ef:09:2e:99:33:86:d6:58:f2:ab:64: 36:bb:e0:ce:75:b9:1d:db:a7:a4:17:a0:8d:e9:d9: d1:11:d8:ea:8b:b8:f8:00:9d:eb:07:f7:bb:f7:39: 9b:a2:8a:f5:88:68:81:d9:a4:31:74:8f:f4:39:70: 43:e9:57:c9:b4:61:8f:3c:8f:be:c1:fb:5e:aa:c7: e0:94:8d:0e:a0:b1:2f:3a:1e:fb:d4:ea:a5:7b:1e: c0:8c:ea:26:89:69:c0:27:a4:30:24:e1:20:8e:2a: ab:6d:b3:7d:e5:24:64:36:2f:55:df:d6:d8:31:88: 23:1f:92:9a:61:5b:39:f1:7c:8b:00:8c:2e:72:15: d7:be:b0:6b:9d:4b:68:91:b6:cc:46:bb:0b:a3:3e: 93:08:00:0c:06:a6:97:79:99:b3:3b:45:81:e9:b8: 56:dd:e0:ab:d5:d8:88:d2:f4:a3:9f:8b:4d:33:d4: c7:87:a6:58:a1:eb:61:03:36:ec:71:70:4f:f3:4f: 19:3e:24:d3:c3:38:a9:88:9a:b9:d8:bd:d8:0e:ad: f2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FA:FF:16:1C:C1:79:30:28:A6:89:1F:57:6B:A5:D6:1E:ED:AE:F4 X509v3 Authority Key Identifier: keyid:BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:53:1e:b1:6a:4c:ec:84:6e:f3:67:91:d2:37:49:39:30:57: 08:ac:b6:9a:db:8f:c9:92:45:b4:d6:65:40:72:10:e5:58:2f: a6:88:b4:11:db:20:40:f7:cc:a6:41:f8:68:81:5f:80:50:00: 70:f8:7d:2a:c6:e8:da:6e:73:25:9c:dd:79:e7:ff:61:62:59: cb:cb:3c:85:57:e9:3e:9e:b9:0b:8e:ad:36:c6:bb:bd:23:0b: 1e:65:bf:88:14:cd:15:19:f5:19:da:3b:06:77:33:b7:c4:4b: e3:4b:f3:0a:29:a4:77:ce:a4:ab:a8:b3:3e:a2:13:bc:da:f5: 15:5a:83:1c:38:16:a3:9f:a0:85:cb:7f:12:8e:5b:83:da:71: 5a:49:93:ea:0f:ba:2a:e0:68:9a:3d:74:2c:da:ae:5f:94:ce: a9:74:e6:56:fe:aa:86:55:0d:ee:29:ce:e9:51:d8:bd:78:d1: 51:e0:dd:38:78:3d:a2:84:99:fa:62:58:a7:21:b7:c4:10:a7: 0e:d9:cd:e8:8b:a5:ea:0b:47:9d:a0:c9:f1:65:12:80:f8:21: 16:71:8e:68:cb:89:47:bf:32:7d:79:24:10:88:47:24:ca:e3: 59:1b:f5:a4:ab:85:1a:7c:06:4b:c0:c9:58:05:bd:18:e8:40: 24:ab:c2:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4yozD6vvGB9RylkgMu1CVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNzY3MDZkM2UwODgxM2RiOGIyNzc2NjI4YWY4NDY1MThl MjZkZDIwHhcNMjYwMTAxMDkwMTM4WhcNMjYwMTAyMDkwMTM4WjAzMTEwLwYDVQQD EygwZWZhZmYxNjFjYzE3OTMwMjhhNjg5MWY1NzZiYTVkNjFlZWRhZWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvljwqj8/mdL8/j0s3cibF8F66Xip uN/76bsKBCqp+u3W/vSrLbQdBEiL8nSmvCMO7wkumTOG1ljyq2Q2u+DOdbkd26ek F6CN6dnREdjqi7j4AJ3rB/e79zmboor1iGiB2aQxdI/0OXBD6VfJtGGPPI++wfte qsfglI0OoLEvOh771Oqlex7AjOomiWnAJ6QwJOEgjiqrbbN95SRkNi9V39bYMYgj H5KaYVs58XyLAIwuchXXvrBrnUtokbbMRrsLoz6TCAAMBqaXeZmzO0WB6bhW3eCr 1diI0vSjn4tNM9THh6ZYoethAzbscXBP808ZPiTTwzipiJq52L3YDq3ylQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA76/xYcwXkwKKaJH1drpdYe7a70MB8GA1UdIwQY MBaAFLp2cG0+CIE9uLJ3ZiivhGUY4m3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW5ad2JUNElnVDI0c25kbUtLLUVaUmppYmRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82ZDQ3NTktYTA1ZS00NmJjLWJlNTgt NjY5ZWVkMmVjN2VhLzEvdW5ad2JUNElnVDI0c25kbUtLLUVaUmppYmRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82ZDQ3NTktYTA1ZS00NmJjLWJlNTgtNjY5ZWVkMmVjN2Vh LzEvdW5ad2JUNElnVDI0c25kbUtLLUVaUmppYmRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1MesWpM 7IRu82eR0jdJOTBXCKy2mtuPyZJFtNZlQHIQ5Vgvpoi0EdsgQPfMpkH4aIFfgFAA cPh9Ksbo2m5zJZzdeef/YWJZy8s8hVfpPp65C46tNsa7vSMLHmW/iBTNFRn1Gdo7 Bnczt8RL40vzCimkd86kq6izPqITvNr1FVqDHDgWo5+ghct/Eo5bg9pxWkmT6g+6 KuBomj10LNquX5TOqXTmVv6qhlUN7inO6VHYvXjRUeDdOHg9ooSZ+mJYpyG3xBCn DtnN6Iul6gtHnaDJ8WUSgPghFnGOaMuJR78yfXkkEIhHJMrjWRv1pKuFGnwGS8DJ WAW9GOhAJKvCgw== -----END CERTIFICATE-----Generated at Thu Jan 1 17:31:34 2026 by rpki-client